Approved changes feed: RSS · Atom

cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:12.5

part: a version: * update: *

VendorWatchguard (ec468727-86da-5bb0-9483-b62749e25478)
ProductFireware Os (61450564-b43a-5239-8e0b-ad6e851d5a0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other12.5
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8247 vulnerable 2026-07-29 01:09:05.694594 WatchGuard Firebox admd Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local network segment to execute arbitrary code. This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:07:16.148Z
Updated: 2026-07-07T03:56:33.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13722 vulnerable 2026-07-29 00:23:33.241444 WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS
WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4_Update1, 12.0 up to and including 12.12 and 2025.1 up to and including 2025.6.2.
Published: 2026-07-02T23:06:12.339Z
Updated: 2026-07-07T03:56:36.130Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13384 vulnerable 2026-07-29 00:23:33.009678 WatchGuard Firebox wgagent Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:05:59.971Z
Updated: 2026-07-07T03:56:37.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13383 vulnerable 2026-07-29 00:23:33.009197 WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 12.1 up to and including 12.12 and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:05:53.872Z
Updated: 2026-07-07T03:56:38.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13377 vulnerable 2026-07-29 00:23:32.993627 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-6947. This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
Published: 2026-07-02T23:05:32.445Z
Updated: 2026-07-06T15:02:58.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13376 vulnerable 2026-07-29 00:23:32.993061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13375 vulnerable 2026-07-29 00:23:32.992672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13374 vulnerable 2026-07-29 00:23:32.992075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13373 vulnerable 2026-07-29 00:23:32.991509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13371 vulnerable 2026-07-29 00:23:32.987403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13084 vulnerable 2026-07-29 00:23:32.810686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13054 vulnerable 2026-07-29 00:23:32.793751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13053 vulnerable 2026-07-29 00:23:32.793258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13050 vulnerable 2026-07-29 00:23:32.782506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4315 vulnerable 2026-06-08 08:05:13.225976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3342 vulnerable 2026-06-08 08:01:18.430259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1498 vulnerable 2026-06-08 07:49:08.769980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1545 vulnerable 2026-06-08 07:08:37.226469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14733 vulnerable 2026-06-08 07:06:35.023095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13939 vulnerable 2026-06-08 07:06:33.090523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13938 vulnerable 2026-06-08 07:06:33.041778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13937 vulnerable 2026-06-08 07:06:33.033422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13936 vulnerable 2026-06-08 07:06:32.991709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12026 vulnerable 2026-06-08 07:04:29.567283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.